Fork me on GitHub
#web-security
<
2022-10-05
>
robert-stuttaford05:10:55

given it's 2022 and there are web services for everything these days, is anyone perhaps aware of test system that can be run via api, that we could plug into a CI pipeline? we give it sufficient configuration (accounts to log in with, urls to test) and then tell it to test on a specific domain, and then it goes off and runs a batch of 'OWASP top 10' type tests?

robert-stuttaford05:10:53

judging from https://owasp.org/www-community/Vulnerability_Scanning_Tools it seems they exist. wondering if anyone has used such and can recommend one?